Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa
File:                     3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa (raw, json)
Hash identifier:          AD5rA199gzNIEd+J8/ElK65uakjii+eFc8LT1OrJz+s=
Subject key identifier:   2B:07:AB:B9:2D:F2:CA:A2:D8:D9:1C:B1:82:CD:88:C7:2F:DD:83:A0
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       71EA3AA014C777773DAB81D5CA391A951249D29A
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa
Signing time:             Wed 18 Feb 2026 19:55:02 +0000
ROA not before:           Wed 18 Feb 2026 19:50:02 +0000
ROA not after:            Wed 17 Feb 2027 19:55:02 +0000
asID:                     52266
IP address blocks:        201.219.252.47/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl
                          rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ea:3a:a0:14:c7:77:77:3d:ab:81:d5:ca:39:1a:95:12:49:d2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Feb 18 19:50:02 2026 GMT
            Not After : Feb 17 19:55:02 2027 GMT
        Subject: CN=2B07ABB92DF2CAA2D8D91CB182CD88C72FDD83A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a3:21:e4:6e:49:fb:fc:be:de:d4:0b:4e:7c:
                    4c:fa:53:10:7c:58:83:88:50:41:e7:bd:7d:a9:24:
                    58:3e:1e:0f:42:ad:46:6f:c7:7d:7c:5e:02:08:5b:
                    3b:b5:e8:ed:63:09:30:b5:b4:78:a8:d0:e5:b3:1a:
                    f4:dc:8e:1c:67:a5:b5:20:f5:97:10:ae:66:9e:4d:
                    fb:fa:d2:d6:14:0d:64:8c:82:c4:8e:71:77:7d:b3:
                    70:53:ef:88:6d:ad:ce:e1:0c:55:1e:f6:79:fb:04:
                    67:11:f7:73:20:d7:fe:14:8e:66:b8:eb:03:13:96:
                    7d:bc:11:81:80:cb:e3:54:7f:03:bd:ad:69:db:2f:
                    05:9f:67:7b:e8:ba:d7:50:49:20:6c:ee:82:1d:ca:
                    79:b4:70:13:bd:61:e5:72:a7:c7:bf:4f:a2:d9:c9:
                    f9:01:c9:9f:7b:ff:5b:62:cd:ae:72:27:ca:0b:17:
                    ad:aa:ba:ed:7e:5b:a7:92:c2:4f:1c:ca:21:f4:c4:
                    92:6b:42:11:ba:c4:d0:06:91:8e:37:90:c8:6d:44:
                    8f:fe:ef:66:66:de:c1:8e:fe:5f:d7:d5:07:74:aa:
                    47:38:b8:46:b9:38:5f:9d:28:c8:35:9b:ec:25:a4:
                    b1:b9:f7:df:3e:65:6d:6f:d5:9b:81:e0:19:6a:76:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:07:AB:B9:2D:F2:CA:A2:D8:D9:1C:B1:82:CD:88:C7:2F:DD:83:A0
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e34372f33322d3332203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.47/32

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:0f:53:5e:f7:8f:5c:01:31:74:83:e0:d2:c8:64:41:19:
         b5:89:ae:55:42:ed:fd:88:39:96:3f:39:44:f0:6b:38:15:ee:
         f7:b4:80:0a:36:44:e7:40:45:87:a6:5f:ad:93:4d:22:4c:3e:
         87:dc:2b:86:d1:04:d7:9a:b7:1b:9e:d2:75:86:cb:ba:68:17:
         88:3f:91:5c:13:1b:62:f6:4e:fd:1f:a2:ac:86:f3:cc:dc:1d:
         04:61:6a:bc:69:fe:50:01:54:3d:ab:57:c4:a3:c5:5e:83:e9:
         15:9f:dc:e2:b8:5d:0c:96:83:fe:7f:03:6e:75:68:c2:2d:00:
         7e:ea:c4:b3:ea:15:8c:28:60:72:d2:9b:8d:12:5b:00:f2:1b:
         10:25:8b:36:27:89:33:aa:4f:e6:7d:2c:58:89:79:d0:71:07:
         82:8d:ec:ed:7a:10:7b:90:7e:d8:e0:b5:79:84:17:87:ad:7f:
         15:db:80:98:be:98:33:79:bd:3a:75:83:79:da:a3:4c:84:8f:
         46:7e:8a:17:8a:c2:ac:2b:14:c2:e2:55:88:55:3f:44:82:43:
         e4:a4:91:23:ef:be:06:12:83:01:62:8c:d3:c6:62:c5:c1:80:
         85:ad:10:0c:9d:b1:a7:61:04:0d:80:72:2d:f3:1b:6b:49:7b:
         c8:a2:45:8f
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUceo6oBTHd3c9q4HVyjkalRJJ0powDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVGMTAwRDZGRUY0REQxODg3MDk1NTk1ODM4MjA3RTY2
OUNBNzQ3OTAeFw0yNjAyMTgxOTUwMDJaFw0yNzAyMTcxOTU1MDJaMDMxMTAvBgNV
BAMTKDJCMDdBQkI5MkRGMkNBQTJEOEQ5MUNCMTgyQ0Q4OEM3MkZERDgzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxoyHkbkn7/L7e1AtOfEz6UxB8
WIOIUEHnvX2pJFg+Hg9CrUZvx318XgIIWzu16O1jCTC1tHio0OWzGvTcjhxnpbUg
9ZcQrmaeTfv60tYUDWSMgsSOcXd9s3BT74htrc7hDFUe9nn7BGcR93Mg1/4Ujma4
6wMTln28EYGAy+NUfwO9rWnbLwWfZ3voutdQSSBs7oIdynm0cBO9YeVyp8e/T6LZ
yfkByZ97/1tiza5yJ8oLF62quu1+W6eSwk8cyiH0xJJrQhG6xNAGkY43kMhtRI/+
72Zm3sGO/l/X1Qd0qkc4uEa5OF+dKMg1m+wlpLG5998+ZW1v1ZuB4BlqdlWZAgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUKweruS3yyqLY2Ryxgs2Ixy/dg6AwHwYDVR0j
BBgwFoAUtfEA1v703RiHCVWVg4IH5mnKdHkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NDdDRjJGMEVEMzM4NjRGMDkxNTNENjIyNEUxRkNGNzA4
MDM0MDI2RDRBMUZGMEUwMEI0MUUyNzc1RUQwMjlFLzAvQjVGMTAwRDZGRUY0REQx
ODg3MDk1NTk1ODM4MjA3RTY2OUNBNzQ3OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUYxMDBENkZFRjRERDE4ODcw
OTU1OTU4MzgyMDdFNjY5Q0E3NDc5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTQ3Q0YyRjBFRDMzODY0RjA5MTUzRDYyMjRFMUZDRjcwODAzNDAyNkQ0
QTFGRjBFMDBCNDFFMjc3NUVEMDI5RS8wLzMyMzAzMTJlMzIzMTM5MmUzMjM1MzIy
ZTM0MzcyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQDJ
2/wvMA0GCSqGSIb3DQEBCwUAA4IBAQCC4g9TXvePXAExdIPg0shkQRm1ia5VQu39
iDmWPzlE8Gs4Fe73tIAKNkTnQEWHpl+tk00iTD6H3CuG0QTXmrcbntJ1hsu6aBeI
P5FcExti9k79H6KshvPM3B0EYWq8af5QAVQ9q1fEo8Veg+kVn9ziuF0MloP+fwNu
dWjCLQB+6sSz6hWMKGBy0puNElsA8hsQJYs2J4kzqk/mfSxYiXnQcQeCjeztehB7
kH7Y4LV5hBeHrX8V24CYvpgzeb06dYN52qNMhI9GfooXisKsKxTC4lWIVT9EgkPk
pJEj774GEoMBYozTxmLFwYCFrRAMnbGnYQQNgHIt8xtrSXvIokWP
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:48:31 2026 by rpki-client